NVD

The NVD is the U.S. government repository, run by NIST, that enriches CVE records with severity scores, affected product data, and references. It is the authoritative free source that most of the vulnerability management ecosystem is built on. Vulnerability scanners and management tools pull from the NVD constantly to keep their databases current.

• Tenable Nessus → The standard vulnerability scanner for finding and prioritizing what to patch. A scanner shows you the holes; fixing them is still your team's job.

Affiliate links: the site may earn a commission at no extra cost to you (how this works). No single tool is a silver bullet; treat each as one layer of coverage.